Clarification Text within the Scope of the Personal Data Protection Law

Clarification Text within the Scope of Law No. 6698 on the Protection of Personal Data Related to Short-Term Renting Accommodation for Tourism Purposes Pursuant to Law No. 7464

This Clarification Text has been prepared by Ocaktaş İnşaat Taahhüt Emlak Komisyonculuğu Turizm Ve Ticaret Limited Şirketi (hereinafter referred to as the “Company”) as the data controller in accordance with the article 10 of the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “LPPD”) and the Regulation on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation. The clarification text informs you about your rights regarding the use and protection of your personal data within the scope of the LPPD and related legislation. 

I- Data Controller

We, as the Company, inform you that we process your personal data in the capacity of data controller for and limited to the purpose of fulfilling our legal obligations within the scope of the LPPD and other relevant legislation. 

II- Processed Personal Data

The categories and explanations of personal data to be processed within the scope of the purposes and legal reasons specified in this Clarification Text, in accordance with the LPPD and other relevant legislation, are specified below:

Identity Information: Name-surname, place and date of birth, nationality, gender, ID number, copy of ID card; name-surname, place and date of birth of accompanying guest

Contact Information: Address, phone number, e-mail address

Financial Information: Bank account details, credit card number, tax number

Sensitive Personal Data: Photograph

Other: Vehicle plate information

III- Purposes of Processing Personal Data

Your personal data will be processed for and limited to purposes specified below;

  • Execution of processes related to accommodation service,
  • Conducting communication activities,
  • Contract processes/ conclusion and execution of the Contract,
  • Keeping records of customers who exhibit inappropriate behavior,
  • Registration in online software systems used by the Company for the execution of sales and marketing policies,
  • Carrying out the necessary work to ensure that you benefit from the products and services offered by the Company,
  • Measuring and improving customer satisfaction,
  • Collection and evaluation of complaints and suggestions, if any, regarding Company’s products and services,
  • Ensuring the legal, technical and commercial business security of the relevant persons with whom we maintain business relations,
  • Follow-up and execution of legal affairs,
  • Carrying out financial and/or accounting affairs,

within the scope of following legal conditions as specified in Article 5/2 of the LPPD: “a) it is clearly provided for by the laws” “c) processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfilment of that contract” “ç) it is mandatory for the controller to be able to perform his legal obligations”, “e) data processing is mandatory for the establishment, exercise or protection of any right”. 

Your personal data will be processed by obtaining your explicit consent in accordance with the legal reasons specified in the LPPD and the Electronic Commerce Law, in order to inform you about campaigns and innovations related to Company services. 

IV- To whom and for what purpose the processed personal data may be transferred

Your personal data will be transferred for the purposes specified below, without requiring the explicit consent of the concerned person, in accordance with Article 8 /2-a of the LPPD:

It will be shared with the General Directorate of Security and/or Gendarmerie General Command in order to fulfill our legal obligations arising from the relevant legislation. 

In order to carry out financial and/or accounting operations related to collection of fees for products and services, it may be shared with the accounting firm and, if necessary, with notaries, enforcement offices and/or courts.

In order to fulfill legal obligations in accordance with the relevant legislation, it may be shared with relevant public institutions and organizations, if necessary or upon request.

It will be shared with the contracted courier company in order to deliver the left and forgotten items in the stayed house.

In order to carry out legal processes, it may be shared with our lawyers, as deemed as necessary in accordance with the confidentiality obligation.

V- Method and Legal Reasons for Collecting Personal Data

Your personal data are obtained verbally, in writing or electronically by automatic or non-automatic methods, based on the legal reasons specified in Article 5/2 and Article 6/2 of the LPPD, in order to fulfill the purposes specified under the heading “III” of this Clarification Text:

Filling out forms, sending e-mail messages, contacting by phone calls, visiting the website and contacting through social media platforms by the relevant person. 

Sharing data through online sales platforms, tourism agencies, organization companies, business card exchanges, solution partner institutions or organizations. 

VI- Your Rights under Article 11 of the LPPD

Pursuant to article 11 of the LPPD, as a data subject, you have the following rights regarding your personal data: 

  • To learn whether personal data are processed or not,
  • Request information if his personal data has been processed,
  • To learn the purpose of personal data processing and whether they are used for intended purposes,
  • To know the third parties to whom his personal data is transferred at home or abroad,
  • To request the rectification of the incomplete or inaccurate data, if any,
  • To request the erasure or destruction of his personal data,
  • In case of rectification, deletion or destruction of personal data, to request notification of these operations to third parties to whom his personal data has been transferred, 
  • To object to the processing, exclusively by automatic means, of his personal data, which leads to an unfavorable consequence for the data subject
  • To request compensation for the damage arising from the unlawful processing of his personal data 

After completing all the information specified in the Data Subject Application Form in accordance with the provisions of article 11 and article 13 /1 of the LPPD and the Regulation on the Procedures and Principles of Application to the Data Controller, you can submit your requests regarding these rights through the following methods: 

By personally visiting our Company at the address “Çırkan Mah. Atatürk Cad. Konacık Çarşısı No:18/A2 Bodrum-Muğla” 

By sending an email to our registered electronic mail address (KEP), [email protected],  

By submitting a written request through a notary public or by registered letter with return receipt, in order to determine your identity and not to provide information to wrong persons, by sending an e-mail to [email protected] using secure electronic signature, mobile signature (if any) or the e-mail address previously provided by you to our company and registered in our systems, 

By other methods to be determined by the Board in the future.

If you submit your requests to us by one of the abovementioned methods, the Company will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the operation requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by the Company.

VII- Retention Period of Personal Data

The Company deletes, erases, destroys or anonymizes personal data upon the disappearance of the purpose of processing personal data and the expiration of the mandatory retention periods determined by the relevant laws and other legislation.

VIII- Amendments and Updates

This clarification text has been prepared within the scope of the LPPD and other relevant legislation. Necessary changes may be made in the said clarification text in accordance with the relevant legal legislation and/or changes in the Company’s personal data processing purposes and policies. 

The most up-to-date version of the Clarification Text will be available on our website https://www.ocaktas.com.tr.